import argparse import importlib import logging from pathlib import Path from tempfile import TemporaryDirectory from clan_cli.cmd import Log, run from clan_cli.completions import add_dynamic_completer, complete_machines from clan_cli.machines.machines import Machine from clan_cli.nix import nix_shell log = logging.getLogger(__name__) def upload_secrets(machine: Machine) -> None: secret_facts_module = importlib.import_module(machine.secret_facts_module) secret_facts_store = secret_facts_module.SecretStore(machine=machine) if not secret_facts_store.needs_upload(): log.info("Secrets already uploaded") return with TemporaryDirectory(prefix="facts-upload-") as tempdir: secret_facts_store.upload(Path(tempdir)) host = machine.target_host run( nix_shell( ["nixpkgs#rsync"], [ "rsync", "-e", " ".join(["ssh", *host.ssh_cmd_opts()]), "--recursive", "--links", "--times", "--compress", "--delete", "--chmod=D700,F600", f"{tempdir!s}/", f"{host.target_for_rsync}:{machine.secrets_upload_directory}/", ], ), log=Log.BOTH, needs_user_terminal=True, ) def upload_command(args: argparse.Namespace) -> None: machine = Machine(name=args.machine, flake=args.flake) upload_secrets(machine) def register_upload_parser(parser: argparse.ArgumentParser) -> None: machines_parser = parser.add_argument( "machine", help="The machine to upload secrets to", ) add_dynamic_completer(machines_parser, complete_machines) parser.set_defaults(func=upload_command)